Privacy Policy - Viral Katha

This Privacy Policy explains how Viral Katha, operated by Vidhura Technologies ("we", "us", "our"), collects, uses, stores, and protects your personal information when you use our website, client portal, or services.

We follow the Digital Personal Data Protection Act, 2023 (DPDP Act) and related Indian data protection regulations.

1. What we collect

Depending on how you interact with us, we may collect:

Identity data: your name, business name, email, WhatsApp number, and any social media handles you share (Instagram, YouTube, Facebook).
Payment data: transaction reference, amount, method, invoice records. We do not store your credit card, UPI PIN, or net-banking credentials - these are handled directly by Razorpay.
Content data: videos, images, scripts, captions, and other files you or our team create as part of the service.
Communications: messages exchanged with our team via email or WhatsApp.
Technical data: IP address, browser type, and basic activity logs used to keep the service secure and diagnose issues.

2. Why we collect it

To deliver the services you have signed up for (creating and publishing videos).
To send you invoices, receipts, and service notifications.
To communicate about your account, content approvals, and renewals.
To comply with tax, accounting, and other legal obligations.
To improve our service and troubleshoot issues.

3. Who we share it with

We do not sell your personal data. We share limited data only with the following categories of processors, and only to the extent required for them to deliver their service:

Payment processing: Razorpay Software Private Limited.
Email delivery: Resend, Inc.
Hosting & database: Render, Vercel, Neon.
File storage: Cloudflare R2.
Social platforms: Meta (Instagram & Facebook), Google (YouTube) - only when you explicitly authorise us to publish on your behalf via OAuth.
Legal authorities: when required by law, court order, or to protect our legal rights.

4. Where your data is stored

Your data is stored on servers located in the Asia-Pacific region (primarily Singapore and Mumbai). Some processors listed above may transfer data internationally under standard contractual clauses.

5. How long we keep it

Active client data: for the duration of your subscription.
Tax and payment records: retained for a minimum of 8 years as required under Indian tax law.
Content files (videos, images): retained for 90 days after subscription ends, then deleted unless you request longer retention.
Communications: retained for 3 years for audit purposes.

6. Your rights under the DPDP Act

You have the right to:

Ask us for a copy of the personal data we hold about you.
Ask us to correct inaccurate data.
Ask us to erase your data (subject to legal retention requirements).
Withdraw consent to future processing (this may end your subscription).
Nominate a person to exercise these rights on your behalf.
File a grievance with our Grievance Officer (see Contact page).

To exercise any of these rights, email info@vidhuratechnologies.com with the subject line "DPDP request". We will respond within 30 days.

7. Cookies

We use only essential cookies to keep you signed in to the client or admin portal. We do not use tracking or advertising cookies. We do not sell cookie data.

8. Children

Our services are not directed at children under 18 years of age. If we discover that we have collected data from a minor without verifiable parental consent, we will delete it.

9. Security

We use industry-standard security controls, including encryption in transit (TLS/HTTPS), password hashing (bcrypt), encrypted token storage, role-based access control, and audit logs. No system is perfectly secure - you help protect your account by using a strong password and not sharing it.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified to registered clients via email at least 14 days before they take effect. The "Effective date" at the top of this page always shows the latest version.

11. Contact

For any questions about privacy, or to exercise your DPDP rights, email us at info@vidhuratechnologies.com.